Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/S4j0cEdbJeZ2T1dcczYV8b2jNGc.roa
File: S4j0cEdbJeZ2T1dcczYV8b2jNGc.roa (raw, json)
Hash identifier: zWmLCLuqN0/hbtdklXKS8sGL+51FPDpq4cZ4O4YGias=
Subject key identifier: 4B:88:F4:70:47:5B:25:E6:76:4F:57:5C:73:36:15:F1:BD:A3:34:67
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018DC0FB2A73995BD02E0951C9DDB9BA18C6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/S4j0cEdbJeZ2T1dcczYV8b2jNGc.roa
Signing time: Mon 19 Feb 2024 10:48:22 +0000
ROA not before: Mon 19 Feb 2024 10:48:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201949
IP address blocks: 89.35.131.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 08:28:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:fb:2a:73:99:5b:d0:2e:09:51:c9:dd:b9:ba:18:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 19 10:48:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b88f470475b25e6764f575c733615f1bda33467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:75:ac:0b:8d:56:14:37:da:35:9e:ed:2b:
be:2e:7f:bb:66:bd:23:d2:74:71:e4:00:93:25:18:
36:0f:ab:41:4d:90:80:8f:3f:29:57:28:44:ed:7d:
e0:e8:88:8c:37:db:d1:c4:5c:33:79:24:c8:93:1c:
13:a0:62:c2:c4:96:d2:50:e3:0a:42:f2:fb:0f:08:
a0:1d:b5:09:0b:66:96:a9:f0:af:73:a8:3b:a4:09:
79:6b:ed:62:68:ee:ef:e8:86:b3:0b:ee:8d:d3:1e:
17:75:93:0a:c6:a2:55:27:1e:86:25:3a:5f:fb:85:
d3:dd:1f:d2:ab:07:97:51:b5:d0:18:11:ab:d9:3e:
1e:e5:7c:ff:c7:bf:63:f4:4d:71:8f:ef:d0:ca:cc:
8a:f0:91:ad:be:55:fb:4b:50:ff:e5:09:57:64:0e:
fe:c5:f3:13:7f:85:22:f7:21:fd:c5:36:22:2a:5a:
ec:8a:4a:f7:f5:bd:f4:48:d1:7f:40:4f:60:33:a4:
8a:35:a7:aa:59:db:a6:25:97:35:78:22:e7:7e:6f:
0b:37:c5:ea:15:ef:3b:8a:18:4d:58:35:6d:f5:8e:
af:a1:6f:0e:b5:d3:94:dc:94:37:65:d2:34:cf:7d:
5c:b6:57:19:82:d5:fd:57:44:2d:62:01:d0:51:15:
7b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:88:F4:70:47:5B:25:E6:76:4F:57:5C:73:36:15:F1:BD:A3:34:67
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/S4j0cEdbJeZ2T1dcczYV8b2jNGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.131.0/24
89.40.70.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:9b:3d:3b:7e:16:b6:5e:48:89:19:d1:d4:c5:d0:aa:50:76:
92:f4:9c:3c:14:8e:d3:09:07:9c:23:00:7d:fb:b4:23:98:ca:
71:a8:de:ad:67:30:bd:6f:9a:a6:13:49:2b:b9:72:76:9f:81:
f5:8e:14:61:c8:8f:b0:79:5f:83:ce:e6:c9:1f:9b:e5:84:bc:
12:c5:a7:8b:37:f7:6b:1f:08:2f:41:ec:1b:0c:dd:d8:56:89:
16:1a:bf:99:20:de:0c:b2:49:42:be:b9:fd:52:70:af:37:42:
53:32:7e:7f:cd:9a:cf:9d:7c:79:5a:65:c7:eb:c2:78:70:a1:
5a:c3:b7:23:2c:da:f3:25:07:e4:f1:38:83:1d:06:04:cd:b9:
2c:7f:1e:81:a0:94:64:a1:a7:d2:fa:cc:03:e9:97:36:79:86:
e8:ef:a8:a6:af:bf:b7:82:ff:fc:1a:1a:f4:05:fd:22:1f:67:
d6:10:31:aa:a9:ab:83:d4:24:21:17:cc:93:49:20:a4:73:64:
02:b2:20:74:cd:b7:e6:97:a5:12:e3:ae:a0:7d:2b:92:83:ad:
5c:7d:29:ca:25:8d:1b:77:6a:7f:42:aa:8c:11:12:9a:95:c5:
b9:3c:88:d3:0d:12:6d:c3:46:61:9c:0e:69:44:df:64:e8:ee:
eb:f1:25:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org